Privacy Policy — How cn777 Protects Your Personal Data

1 Introduction

cn777 ("the Platform", "we", "us", "our") is committed to safeguarding the privacy and personal data of every individual who accesses or uses the services available at cn777.io and any associated subdomains or mobile interfaces operated under the cn777 brand. This Privacy Policy sets out a comprehensive account of how we collect, process, store, share, and protect your personal data in connection with your use of the cn777 platform.

This policy applies to all registered players, prospective players who browse the platform without registering, and any individual who communicates with cn777 via email, live chat, WhatsApp, or any other support channel. By using the cn777 platform in any capacity, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein.

This Privacy Policy should be read alongside the cn777 Terms and Conditions and Responsible Gaming Policy, all of which together govern your relationship with the cn777 platform. In the event of any conflict between this policy and the Terms and Conditions on a matter relating specifically to data processing, this Privacy Policy shall govern.

2 Data We Collect

cn777 collects personal data from you through several channels: directly when you register an account, deposit funds, or contact our support team; automatically when you browse or interact with the platform; and from third-party payment processors and identity verification providers where applicable. The categories of personal data we collect are set out below.

We do not knowingly collect or store complete payment card numbers. For Visa and Mastercard transactions, only the card type and last four digits are retained for record-keeping purposes. Full card processing is handled exclusively by our certified payment partners under their own PCI DSS-compliant systems.

3 How We Use Your Data

cn777 processes personal data for the following specific purposes. We do not use your personal data for any purpose that is incompatible with those stated below without first obtaining your explicit consent or as required by applicable law.

• Account creation and management: To register and maintain your player account, verify your identity, manage your balance, and provide you with access to all platform features.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions in Bangladeshi Taka (৳).
• Identity and age verification: To confirm that you are at least 21 years of age and to complete our Know Your Customer (KYC) obligations, including verifying the authenticity of documents submitted by you.
• Service delivery and improvement: To operate, maintain, and improve the cn777 platform, including its games, sports betting markets, and support infrastructure.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, bonus abuse, and other forms of prohibited conduct as defined in the cn777 Terms and Conditions.
• Legal and regulatory compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and maintain records required for audit and compliance purposes.
• Responsible gaming: To monitor betting patterns and usage data for indicators of problem gambling behaviour, to enforce deposit limits and self-exclusion elections made by you, and to fulfil our responsible gaming obligations.
• Customer support: To respond to your support queries, resolve disputes, and maintain records of correspondence for quality assurance and training purposes.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign communications (such as Eid, BPL, or Pohela Boishakh promotions) where you have provided your explicit consent to receive such communications. You may withdraw consent at any time by contacting support.
• Platform personalisation: To tailor game recommendations, promotional offers, and content to your demonstrated preferences and usage history on the platform.

4 Legal Basis for Processing

cn777 processes your personal data on the following legal bases. Where more than one basis applies to a specific processing activity, both are identified below.

• Contractual necessity: Processing that is necessary to perform the contract between you and cn777 — including account registration, payment processing, game delivery, and customer support — is carried out on the basis that it is required to fulfil our contractual obligations to you.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of cn777's legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Legal obligation: Processing required to comply with applicable legal obligations — including KYC identity verification, anti-money laundering record-keeping, and responses to lawful regulatory or law enforcement requests — is carried out on the basis of legal compliance.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out only where you have given your explicit, freely-given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

cn777 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. Your personal data is shared only in the specific circumstances described below, and always subject to appropriate contractual safeguards.

• Payment service providers: Your financial data is shared with payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks solely to the extent necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independently certified for data security compliance.
• Identity verification providers: During KYC review, identity data and supporting documents may be shared with third-party verification service providers engaged by cn777 to confirm the authenticity of the documents you submit. These providers are contractually bound to process data only on our instructions.
• Game content providers: Basic usage and session data may be shared with game studio providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of delivering their game content and maintaining accurate game round records. These providers do not receive your identity or financial data beyond what is technically required for game delivery.
• Fraud prevention and security partners: Certain usage data and device fingerprint information may be shared with third-party fraud detection platforms engaged by cn777 to identify and prevent fraudulent activity on the platform.
• Legal and regulatory authorities: cn777 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so by a valid and binding legal process. We will notify you of such a request to the extent we are lawfully permitted to do so.
• Business transfers: In the event that cn777 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change to the applicable privacy policy in advance.

6 Cookies & Tracking Technologies

The cn777 platform uses cookies and similar tracking technologies to deliver and improve the platform experience, to maintain session security, and to analyse usage patterns. A cookie is a small text file placed on your device by a web server when you access a website. Cookies do not grant access to your device or to any personal information stored on it beyond what is described in this section.

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They include session management cookies that keep you logged in during an active session and security tokens that protect your account from cross-site request forgery. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Functional cookies: These cookies remember your preferences and settings, such as your chosen language, notification preferences, and responsible gaming limits, so that you do not need to reset them on each visit.
• Analytics cookies: These cookies collect anonymised or pseudonymised data about how players navigate the platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve the platform design and performance. We do not use third-party advertising analytics cookies.
• Cookie duration: Session cookies are deleted automatically when you close your browser. Persistent cookies (used for preference and analytics purposes) remain on your device for a period of up to 12 months from the date they are set, after which they expire automatically.

You may control or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair platform functionality, and you may not be able to maintain a logged-in session or access certain features. Instructions for managing cookies are available in the help documentation for all major browsers.

7 Data Retention

cn777 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to the main categories of data we hold are summarised below.

Once a retention period has expired and no legal basis exists for continued storage, cn777 will securely delete or anonymise the relevant personal data in accordance with our internal data disposal procedures. Anonymised data that can no longer be linked to any identifiable individual may be retained indefinitely for aggregate statistical purposes.

8 Data Security

cn777 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include the following:

• SSL/TLS encryption: All data transmitted between your device and the cn777 platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms that your connection is encrypted at all times.
• Data encryption at rest: Sensitive personal data stored in our systems — including identity documents and financial records — is encrypted at rest using strong encryption standards.
• Access controls: Access to personal data held by cn777 is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive data protection training.
• Two-factor authentication: cn777 offers two-factor authentication (2FA) for player accounts and requires it for all internal administrative access to systems holding personal data.
• Intrusion detection and monitoring: Our platform infrastructure is monitored continuously for suspicious activity. Automated intrusion detection systems alert our security team to anomalous login patterns or access attempts in real time.
• Regular security assessments: cn777 engages independent security specialists to conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.
• Incident response: In the event of a confirmed personal data breach that is likely to affect your rights and freedoms, cn777 will notify affected players as promptly as practicable, providing details of the nature of the breach, the data affected, and the steps we are taking to address it.

9 Your Data Rights

As a player on the cn777 platform, you hold specific rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of access: You have the right to request a copy of the personal data that cn777 holds about you, along with information about how it is being processed. This is sometimes referred to as a subject access request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update some data directly through your account settings panel without needing to contact support.
• Right to erasure: In certain circumstances, you have the right to request that cn777 delete the personal data we hold about you. This right is subject to limitations where retention is required by legal obligation (for example, KYC and financial records must be retained for the periods specified in Section 7).
• Right to restriction of processing: You have the right to request that cn777 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on contract performance, you have the right to receive the personal data you have provided to cn777 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where that processing is based on cn777's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, contact [email protected] at any time.

10 Third-Party Links

The cn777 platform does not contain links to third-party websites, social media platforms, or external services beyond the payment processors described in this policy. Any game content delivered via embedded studio interfaces (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi live game environments) is accessed within the cn777 platform itself and is delivered under contract between cn777 and the relevant game studio.

cn777 is not responsible for the privacy practices of third-party payment processors or identity verification providers once your data is passed to them for the specific purpose described in this policy. We encourage you to review the privacy policies of bKash, Nagad, Rocket, Upay, Visa, and Mastercard independently, as they govern the handling of your data within their own systems and are not controlled by cn777.

11 Children's Privacy & Age Restriction

The cn777 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. The registration process includes date of birth verification as a mandatory field, and all accounts are subject to KYC identity verification before withdrawals are approved.

If cn777 becomes aware or has reason to believe that an account has been registered by or is being operated by a person under the age of 21, that account will be suspended immediately. All personal data associated with the underage account will be deleted (subject to any legal retention obligation relating to the KYC process), and any deposits made will be returned to the original funding source after identity verification is completed.

12 Updates to This Privacy Policy

cn777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the platform's features and services. Any material update that affects your rights or the way in which we process your personal data will be communicated to registered players via email notification to the address on file, or via a prominent in-platform notification displayed upon your next login.

Minor or clarificatory updates that do not materially affect your rights may be implemented without individual notification, but the updated policy will always be available at cn777.io/privacy-policy with a revised effective date clearly displayed. We encourage you to review this policy periodically. Your continued use of the cn777 platform after the effective date of any revision constitutes your acceptance of the updated policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which cn777 processes your personal data, please contact our support team using the details below. All data-related enquiries must be submitted in English and should clearly state that the enquiry relates to a privacy or data protection matter.

For formal data rights requests, please email [email protected] with the subject line "Data Rights Request — [Your Username]" and include a description of your request along with sufficient information to verify your identity. We aim to acknowledge all formal data rights requests within 5 business days and to provide a full response within 30 calendar days of receipt.